CVE-2026-19293— SMP security request
Possible ATT&CK Techniques 1AI
T1557 · Adversary-in-the-MiddleAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| silabs.com | WiseConnect | 4.0.0< 4.1.0 | affected |
2.0.0< 2.14.0 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-19293
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SMP security request
Source: CVE Program / CVE List V5
Vulnerability Description
SMP security request (from peripheral) does not include the maximum encryption key size supported. Using a key with less than the maximum keysize makes brute-forcing the key easier. See V6 in BLERP paper linked below.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
弱口令要求
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| silabs.com | WiseConnect | 4.0.0 ~ 4.1.0 | - |
II. Public POCs for CVE-2026-19293
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-19293
请登录查看更多情报信息。
Security Blog Posts for CVE-2026-19293 (1)
Other References for CVE-2026-19293 (1)
Same Patch Batch · silabs.com · 2026-08-13 · 9 CVEs total
| CVE-2026-16101 | 8.8 HIGH | forced re-pairing with already bonded device |
| CVE-2026-19292 | 8.8 HIGH | Bluetooth re-pairing with legitimate device can use lower security level |
| CVE-2026-19291 | 8.8 HIGH | Bluetooth re-pairing can use a lower security level than previous |
| CVE-2026-65935 | 7.6 HIGH | Bypassing passkey entry in legacy pairing |
| CVE-2026-65934 | 7.1 HIGH | BT122 plaintext pause encryption request causes DOS |
| CVE-2026-65932 | 5.3 MEDIUM | BT122 stops advertising |
| CVE-2026-65936 | 5.3 MEDIUM | RS9116W/SiWx917 malformed packet with increased length field causes memory leak |
| CVE-2026-65933 | 5.3 MEDIUM | BT122 malformed packet with increased length field causes memory leak |
IV. Related Vulnerabilities
Same product: WiseConnect
- CVE-2026-65936
RS9116W/SiWx917 malformed packet with increased length fiel - CVE-2026-65935
Bypassing passkey entry in legacy pairing - CVE-2026-19292
Bluetooth re-pairing with legitimate device can use lower se - CVE-2026-19291
Bluetooth re-pairing can use a lower security level than pre - CVE-2026-16101
forced re-pairing with already bonded device
Same vendor: silabs.com
- CVE-2026-65936
RS9116W/SiWx917 malformed packet with increased length fiel - CVE-2026-65935
Bypassing passkey entry in legacy pairing - CVE-2026-65934
BT122 plaintext pause encryption request causes DOS - CVE-2026-65933
BT122 malformed packet with increased length field causes m - CVE-2026-65932
BT122 stops advertising
Same weakness: CWE-521
- CVE-2026-56577
HCL MyCloud affected by Weak Password Policy - CVE-2026-35097
Weak Password Requirements in KTM System e-BOK - CVE-2026-11493
Tenda AC15 Samba smb.conf weak password - CVE-2024-40684
IBM Operations Analytics - Log Analysis is affected by Weak - CVE-2026-9394
Besen BS20 EV Charging Station Bluetooth Low Energy weak pas
V. Comments for CVE-2026-19293
No comments yet